CVE-2010-0738
MEDIUMCVSS 5.3Known ExploitedCISA Known Exploited Vulnerability
https://nvd.nist.gov/vuln/detail/CVE-2010-0738
Remediation deadline: June 15, 2022
Ransomware use: Known
Description
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.
Timeline
Published:April 28th, 2010 10:30 PM
Last modified:August 14th, 2026 5:16 AM
Added to KEV:May 25th, 2022
CVSS Scoring
CVSS v3: 5.3 (MEDIUM)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v2: 5.0
Affected Software
From NVD CPE configuration data
Vendors
redhat
Products
jboss_enterprise_application_platform
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
- http://marc.info/?l=bugtraq&m=132129312609324&w=2Exploit
- http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35Third Party Advisory
- http://secunia.com/advisories/39563Broken Link
- http://securityreason.com/securityalert/8408Broken Link
- http://securitytracker.com/id?1023918Broken Link
- http://www.securityfocus.com/bid/39710Broken Link
- http://www.vupen.com/english/advisories/2010/0992Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=574105Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58147Third Party Advisory
- https://rhn.redhat.com/errata/RHSA-2010-0376.htmlBroken Link
- https://rhn.redhat.com/errata/RHSA-2010-0377.htmlBroken Link
- https://rhn.redhat.com/errata/RHSA-2010-0378.htmlBroken Link
- https://rhn.redhat.com/errata/RHSA-2010-0379.htmlVendor Advisory
- http://marc.info/?l=bugtraq&m=132129312609324&w=2Exploit
- http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35Third Party Advisory
- http://secunia.com/advisories/39563Broken Link
- http://securityreason.com/securityalert/8408Broken Link
- http://securitytracker.com/id?1023918Broken Link
- http://www.securityfocus.com/bid/39710Broken Link
- http://www.vupen.com/english/advisories/2010/0992Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=574105Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58147Third Party Advisory
- https://rhn.redhat.com/errata/RHSA-2010-0376.htmlBroken Link
- https://rhn.redhat.com/errata/RHSA-2010-0377.htmlBroken Link
- https://rhn.redhat.com/errata/RHSA-2010-0378.htmlBroken Link
- https://rhn.redhat.com/errata/RHSA-2010-0379.htmlVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0738US Government Resource
Source: NIST NVD · Data may lag official sources by up to one minute